Yep! Basicall, they sit between you and your visitors as a reverse proxy. When you domain is accessed through their infrastructure (you set this up via DNS), they’ll sign SSL for you domains so you don’t need to worry about it. Using the origin certificate secures communication from your server to theirs, so there’s no point in the chain being left in the open. They’ll even do DDOS protection and some basic web application firewall for free as well.
Additionally, since they’re globally distributed, your website could have static content cached closer to your visitor, thereby giving a faster experience.
They’ve also added lots of great stuff to help with locking down remote access to your internal infrastructure. For example if I want to SSH into my homelab, I don’t have to expose my SSH globally, and when I try to access it, I get a browser pop up asking me to login to my SSO, and then grants access.
I really enjoy and recommend trying their free offering.
Everyone has an opinion, and at the end of the day, whatever works best for you is what you should stick with.
I like Traefik because you can mount /var/run/docker.sock:/var/run/docker.sock:ro
to Traefik, then it can read labels from containers, and automatically wire up new instances based on labels on them. I'm sure there's equivalent in other reverse proxy solutions, but as I said, it works for me and I like it.
I give that container my Cloudflare origin certificate, everything gets encrypted in transit to Cloudflare, and then Cloudflare handles all the SSL management for me, as well as provide extra layer of DDOS protection.
Lemmy is very “open” right now; some might say by design, other might say flawed. OP is maybe coming from a good place and actually wants to help, but instead of doing it tactfully, OP is becoming the exact thing they’re advocating against — a spammer posting garbage.
This right here.
Op, if you’re not ready to moderate, don’t spin up your own server or do your own private instance. If you’re going to moderate, do it properly and don’t spew bad ideas while hiding behind a dumb “alert” throwaway.
Yeah, I'm getting mixed results as well. Federation seems to be super finicky right now. A lot of finger pointing going on and some posts I've seen suggests it is Cloudflare being the culprit. As much as I'd like to shed Cloudflare to get federation working, I just don't see that being something that's viable long term. It is very easy to DDOS someone, and I do not want to expose my instance IP publicly.
Looking at the commit logs, the difference between 0.17.3
and 0.17.4
seems to be just some database optimizations, so I think the problem we're seeing is still something else.
Also, the lemmy.ml instance is acting up across the board, even from the lemmy.world instance, or other major instances, the subscribe doesn't seem to return properly... so I wouldn't necessarily use them as the benchmark.
I did some quick google'ing when I saw it... otel is probably opentelemetry, but the Lemmy developers didn't include that in the released docker-compose. Perhaps it is something they're using internally. I haven't notice any telemetry related issues, yet, so I'm just keeping my fingers crossed for now...
Make that the two of us! I'm still very much still trying to figure things out, too!
The two links I've shared, in theory, should present the same content, and interaction on either (depending where you have your account) should be reflected on the other fairly quickly. Since your account currently is on Lemmy World, you'd want to use this link to interact with it on Lemmy World. Again, in theory, once you interact with it, be it upvoting, adding a comment, or whatever, it should propagate to my instance and be reflected there... but that's not what I'm seeing right now.
Hopefully someone can point out where I am going wrong, and help me correct the error, so we'd all be able to interact with the various instances as expected :)
I have shared them in a separate post; though, it would appear that there are still some federation issues as the post appears to be some what de-sync on my own instance and lemmy.world. I'm also for some strange reason unable to see your reply on my own instance, hence why I'm replying with my lemmy world account instead... If you do make some more progress, please do share it with the community at large so more of us can have the setup we'd like!
Do you have federation enabled? I think the checkbox in /admin
isn't checked by default.
Unfortunately, it would appear that there's not without very significant problems... I'm commenting to your comment via my lemmy.world account because I'm not seeing your comment on my instance.
If you do get it working, and find ways to resolve issues I'm having, please do share back so I can get my instance fixed as well! Thanks!
I’m seeing only partial federation on my instance. I see some posts but the comments are sporadic and I’m not sure why. I am also behind cloudflare. If you find more details, please do share so we can get up and running!
Yeah, the entire setup is quite finicky still. Part of me thinks Fediverse is forced into the spotlight by Twitter (Mastadon) and Reddit (Lemmy), and the whole thing is not quite baked yet. Don't get me wrong, having a more open space is great, but there are so many things that's not quite ready for prime time. I hope the dev team behind the platform (not the self hosted instance admins) will be more open to ideas and rapidly improve the platform.
I am new to the fediverse, and I don't use Friendica, so I could be entirely wrong about this. However, from what is described, perhaps Friendica has some sort of feature in which would trigger your instance to go out to fetch some data from another instance. Someone exploited this feature, spammed your instance with content from assortment of subdomains on the *.activitypub-troll.cf
domain, and most if not all of them are probably non-existent. As result of that, your server is re-checking every 10 minutes to see if they've came back online. This would also explain why shutting down the Friendica service resolved the problem for you.
Community link open via mlem app
Seems like an easy missed opportunity. In the settings pane, there is a link to this community. Tapping it opens an in app safari view… if we’re already in the mlem app, why shouldn’t the link open the community as if it were a feed?
Yeah, I really do think we need both:
!gaming@...
or !gaming@
which aggregates [email protected]
, [email protected]
, ... etc. that I've subscribed to into a single feed; and
#gaming
which I can put !gaming@...
, !pcgaming@...
, and !consolegaming@...
into a single collection.
This way we'd get the flexibility to pick and choose what we'd want to see more easily.
Love that there’s an app to get up and running so quickly. Thank you. A couple questions/feedbacks if I may:
-
I’m noticing some janky/sticky/bouncy behaviour. I tend to observe this in longer posts with more comments in the thread coming in via incremental loading. Some messages tends to stick and pop back after I scroll some distance. Is this artifact of Lemmy server rather than mLem client?
-
I mentioned else where that aggregation of communities would be very useful. Where us refugees came from had the concept of “multi” and one could custom tailor community_A+community_B+community_C to group similar concepts together. With the decentralized nature, would it be possible to add similar setup, as well as a generic “!community@“ feed that pulls and aggregates the feed from all of my subscribed instances if “!community”? A slick UI to manage this in mLem will make it a killer feature that other apps doesn’t have, thus drive adoption :)
-
Some people get really excited and write huge walls of text, which results in a lot of scrolling in feeds. It would be nice to have a compact view on the feed where it just shows the title and first few lines of text, and the tapping into the thread to see the full message thread. This would make scrolling through larger quantities of posts in feed faster and easier.
-
Is it possible to detect if the destination of a link is a Lemmy instance/post/comment, and render that in the app instead of bouncing the user to an in app safari view? Kind of defeats the purpose of using an app if we end up just seeing the instance’s web view anyway.
Thanks again for getting an app up and running for everyone!
Are there ways to manage lists of such? For example, on the former platform that doesn't deserve a call out, you can do "me_irl+meirl" and aggregate both into one feed. This makes reading the (albeit potentially cross posted) content in a unified feed much easier.
Another similar point I'm having a hard time getting over is that with a centralized platform, it is easy to go to "Subject A", and see everything on that subject. However, now I need to see "Subject [email protected]", "Subject [email protected]", "Subject [email protected]"... Yes, I could subscribe to them all, but this ultimately end up creating a noisy home feed with also "Subject [email protected]", "Subject [email protected]", "Subject [email protected]", "Subject [email protected]", ... etc. all baked into one feed, as opposed to just something focused on "Subject A".
Lastly, discoverability leaves a lot of room for desire. Today, I'm fairly new to Lemmy, I am actively seeking out communities that I might be interested in, across multiple popular instances, and hoping that federation is enabled between the two instances. Tomorrow, I'd find that I'm subscribed to too many (see the noisy main feed issue above), and I'd remove a bunch. Next week, am I likely to go to the Join Lemmy directory to find new instances, and add "duplicate" communities from newly popular instances? I think not.
I think the long term survival of the platform (to expand beyond just us tech nerds that hate the former platform) will depend a lot on streamlining this workflow to make content discovery much more consistent. Even a simple option where a pseudo "!Community@" (with no instance) feed that aggregates all the "!Community" regardless of instance that you've subscribed to, might go a long way.